as a user, I would like to optionally use a RHUI entitlement cert during repo auth
There are two small differences between a RHUI entitlement cert and a cert generated by candlepin. In a RHUI cert, the "order" OID is missing, and the "content type" field on each product content entry is missing as well.
Pulp's repoauth should have a flag in repo_auth.conf to toggle checking between these types of certs.
- a new value in /etc/pulp/repo_auth.conf to enable checking a RHUI-based cert. If this value is missing, just default to false.
- changes in _check_extensions() in oid_validation.py to support this (change should be just a few lines)
- unit tests
- a release note